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(54) Method and system for billing on the internet 



(57) The present invention discloses an Internet bill- 
ing method which can reject invalid orders with reliabil- 
ity, and which can be used without a credit card. In the 
present invention, a terminal makes a request of a con- 
tent server for a chargeable service by using a prepaid 
information medium which has predetermined informa- 
tion necessary for transactions. After the request, the 
content server makes a request of a prepaid information 
management server for authentication to check whether 



the prepaid information medium is authorized to be used 
for the chargeable service, and for billing for the prepaid 
information medium. Then, the prepaid information 
management server authenticates the prepaid informa- 
tion medium and performs the billing for the prepaid in- 
formation medium on the basis of usage of the charge- 
able service. If the authentication and the billing suc- 
ceed, the content server provides the chargeable serv- 
ice to the terminal. 
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Description 

BACKGROUND OF THE INVENTION 
1 . Field of the Invention 

[0001] The present invention generally relates to a 
method, a system and a computer usable medium stor- 
ing a program for billing on the Internet, and, more par- 
ticularly, to a method, a system and a computer usable 
medium storing a program tor billing for a chargeable 
service on the Internet. 



10 



is signed electronically and encrypted, to the shop 
member's terminal. At the same time, the payment 
center sends an updated balance of the virtual pre- 
paid card to the general member's terminal. As a 
result of this, the payment from the general member 
to the shop member is completed, 
(step 6) The shop member's terminal which re- 
ceived the payment notice verifies the electronic 
signature and checks whether the notice is really 
sent from an authorized payment center. Then, the 
shop member sends the selected goods to the gen- 
eral member. 



2. Description of the Related Art 

[0002] As a billing system for a chargeable service on 
the Internet, there have been a system using a credit 
card, a members-only system for a specific service and 
so on. For using such systems, a user must become a 
member of the credit card or a member of the service 
provider. Then, the user will be provided with service 
within a limited scope. Also, there have been billing sys- 
tems using prepaid cards. As an example of such billing 
systems using prepaid cards, the Japanese laid-open 
patent application No. 9-251 494 discloses "a payment 
system using a virtual prepaid card." In the following, a 
general outline of the steps for a payment by this system 
will be described. 

(step 1) A general member's terminal makes a re- 
quest of a payment center of the system for a virtual 
prepaid card. Then, the payment center provides 
the general member with the virtual prepaid card af- 
ter acknowledging receipt of money from the gen- 
eral member. For adding money to the payment 
server of the system, the general member may use 
a credit card, may deposit into a predetermined 
bank account in connection with the payment serv- 
er, or the like. 

(step 2) After obtaining the virtual prepaid card, the 
general member selects wanted goods from a list 
of goods, which list is sent from a shop member's 
terminal via a network, and displayed on the general 
member's terminal. Then, the general member 
completes the order. 

(step 3) The general member sends a payment in- 
struction (such as a transaction number), which is 
signed electronically and encrypted, to the payment 
center from the general member's terminal, 
(step 4) After the payment center receives the pay- 
ment instruction, it verifies the electronic signature 
and checks whether the instruction is really sent 
from an authorized general member. Then, the pay- 
ment center checks a balance of the virtual prepaid 
card of the general member. 

(step 5) If the procedures of step 1 -step 4 are com- 
plete correctly, the payment center sends a pay- 
ment notice (such as a transaction number), which 



[0003] However, there are disadvantages of the 
is above-mentioned systems. To use services provided by 
the above-mentioned systems, a user must become a 
member of the credit card or a member of the service 
provider. Therefore, the number of users will be limited. 
Also, to become a member of the credit card or the serv- 
20 jce provider, one must disclose personal information to 
the credit card provider or the service provider, and can- 
not use the service without disclosing the personal in- 
formation. Further, the procedure for becoming a mem- 
ber is complicated and is not convenient. Furthermore, 
25 sending a credit card number on the Internet introduces 
a risk of interception and abuse of the credit card 
number by a third party. 

[0004] Also, in the above-mentioned "a payment sys- 
tem using a virtual prepaid card, 1 ' after the completion 

30 of the order process between the general member's ter- 
minal and the shop member's terminal, the payment 
center performs the payment process in accordance 
with the instruction from the general member. Therefore, 
there is a disadvantage that the system receives an or- 

35 der from a general member's terminal without verifica- 
tion of the general member and balance of the virtual 
prepaid card. Accordingly, in the above-mentioned 'a 
payment system using a virtual prepaid card," a fraud- 
ulent order by an ill-intentioned third party cannot be re- 

40 jected. Also, the system cannot reject an order from a 
general member's terminal even if the balance of the 
prepaid card of the member is not enough. Further, the 
system cannot refuse an order even if the payment cent- 
er is not operating. 

45 

SUMMARY OF THE INVENTION 

[0005] It is a general object of the present invention 
to provide an Internet billing method, system and a com- 
so puter usable medium which can reject invalid orders 
with reliability, and which can be used without a credit 
card. 

[0006] The above object of the present invention is 
achieved by an Internet billing method which makes bill- 
55 ing on the Internet possible, wherein the method in- 
cludes the steps of: 

making a request, by a terminal, of a content server 
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for a chargeable service by using a prepaid infor- 
mation medium which has predetermined informa- 
tion necessary for transactions; 
making a request, by the content server, of a pre- 
paid information management server for authenti- 
cation tocheck whether the prepaid information me- 
dium is authorized to be used for the chargeable 
service, and for billing for the prepaid information 
medium; 

authenticating, by the prepaid information manage- 
ment server, the prepaid information medium; 
performing, by the prepaid information manage- 
ment server, the billing for the prepaid information 
medium on the basis of usage of the chargeable 
service; and 

providing the terminal, by the content server, with 
the chargeable service. 

[0007] In the above Internet billing method, a pass- 
word included in the predetermined information may be 
input to the terminal by a user instead of from the prepaid 
information medium. 

[0008] The above object of the present invention is al- 
so achieved by an Internet billing method which makes 
billing on the Internet possible, the method including the 
steps of: 

making a request, by a terminal of a content server 
for a service menu by using a prepaid information 
medium which has predetermined information nec- 
essary for transactions; 

sending the service menu to the terminal by the con- 
tent server; 

making a request, by the terminal, of the content 
server for a chargeable service upon selecting 
needed service by a user; 

making a request, by the content server, of a pre- 
paid information management server for authenti- 
cation to check whether the prepaid information me- 
dium is authorized to be used for the chargeable 
service, and for billing for the prepaid information 
medium; 

sending, by the terminal, to the prepaid information 
management server, an ID stored in the prepaid in- 
formation medium upon receipt of a request from 
the prepaid information management server; 
sending information for authentication to the termi- 
nal by the prepaid information management server; 
performing a predetermined operation of concate- 
nation of the information and a password by the ter- 
minal; 

sending a result of the operation to the prepaid in- 
formation management server; 
performing, by the prepaid information manage- 
ment server, the same operation as performed in 
the terminal of concatenation of the information and 
the password of the prepaid information medium, 
which password is stored in a database, and au- 



thenticating the prepaid information medium by ver- 
ifying a result of the operation against the result sent 
from the terminal; 

searching the database for a balance of the prepaid 
s card having the ID, and performing billing with ref- 

erence to the balance, by the prepaid information 
management server; 

notifying the terminal of information including the 
balance of the prepaid information medium by the 
10 prepaid information management server if both au- 
thentication and billing succeed; and 
providing, by the content server the chargeable 
service to the terminal. 

is [0009] In the Internet billing method, the password 
may be input to the terminal by a user instead of from 
the prepaid information medium. 
[0010] The. above object of the present invention is 
achieved by, in an Internet billing system which makes 

20 billing on the Internet possible, in which system at least 
one terminal, at least one content server and at least 
one prepaid information management server are con- 
nected to a network, a method for controlling the termi- 
nal, the method including the steps of: 

25 

accessing the content server on the basis of ad- 
dress information stored in a prepaid information 
medium which has predetermined information nec- 
essary for transactions, and making a request for a 
30 service menu; 

making a request of the content server for a charge- 
able service; 

sending, upon receipt of a request from the prepaid 
information management server, an ID stored in the 
35 prepaid information medium to the prepaid informa- 
tion management server; 

receiving information for authentication from the 
prepaid information management server, reading 
out a password stored in the prepaid information 

40 medium, performing a predetermined operation on 
concatenation of the information and the password, 
and sending a result of the operation to the prepaid 
information management server; and 
writing information including a balance of the pre- 

45 paid information medium to the prepaid information 
medium on the basis of notification from the prepaid 
information management server. 

[0011] The above object of the present invention is al- 
so so achieved by, in an Internet billing system which 
makes billing on the Internet possible, in which system 
at least one terminal, at least one content server and at 
least one prepaid information management server are 
connected to a network, a method for controlling the 
55 content server, the method including the steps of: 

receiving a request for a service menu from the ter- 
minal on the basis of address information stored in 
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a prepaid information medium which has predeter- 
mined information necessary for transactions, and 
sending the service menu to the terminal; 
receiving a request for a chargeable service from 
the terminal; 

making a request of the prepaid information man- 
agement server for authentication by sending a 
message which includes an address of the terminal 
to the prepaid information management server, and 
for billing for the prepaid information medium by 
sending a number of points necessary for the 
chargeable service; and 

providing the chargeable service to the terminal if 
both the authentication and billing succeed. 

[0012] The above object of the present invention is al- 
so achieved by, in an Internet billing system which 
makes billing on the Internet possible, in which system 
at least one terminal, at least one content server and at 
least one prepaid information management server are 
connected to a network, a method for controlling the pre- 
paid information management server, the method in- 
cluding the steps of: 

receiving a request for authentication of a prepaid 
information medium, used at the terminal, which 
prepaid information medium has predetermined in- 
formation necessary for transactions, and for billing 
for the prepaid information medium; 
making a request for an ID stored in the prepaid in- 
formation medium, and receiving the ID; 
sending information for authentication to the termi- 
nal; 

receiving a result of an operation performed by the 
terminal; 

performing the same operation as performed in the 
terminal by referring to a database which stores pre- 
paid information, and authenticating the prepaid in- 
formation medium by verifying a result of the oper- 
ation against a result sent from the terminal; 
decrementing a balance of the prepaid information 
medium by necessary points if the authentication 
succeeds; and 

notifying the terminal of information which includes 
the decremented balance of the prepaid information 
medium. 

[001 3] The above object of the present invention is al- 
so achieved by an Internet billing system which makes 
billing on the Internet possible, the Internet billing sys- 
tem including at least one terminal, at least one content 
server and at least one prepaid information manage- 
ment server which are connected to a network, 
wherein the terminal includes: 

a part for making a request of the content server for 
a chargeable service by using a prepaid information 
medium; 



wherein the content server includes: 

a part for making a request of the prepaid informa- 
tion management server for authentication to check 
5 whether the prepaid information medium is author- 
ized to be used for the chargeable service; 
a part for making a request of the prepaid informa- 
tion management server for billing for the prepaid 
information medium; and 
io a part for providing the chargeable service to the 
terminal; and 

wherein the prepaid information management 
server includes: 

15 

a part for authenticating the prepaid information me- 
dium; ands 

a part for performing the billing for the prepaid in- 
formation medium on the basis of usage of the 
20 chargeable service. 

[0014] The above object of the present invention is al- 
so achieved by an Internet billing system which makes 
billing on the Internet possible, the Internet billing sys- 
2S tern including at least one terminal, at least one content 
server and at least one prepaid information manage- 
ment server which are connected to a network, 
wherein the terminal includes: 

30 a part for making a request of the content server for 
a chargeable service by using a prepaid information 
medium which has predetermined information nec- 
essary for transactions; 

a part for sending an ID stored in the prepaid infor- 
ms mation medium upon receipt of a request from the 
prepaid information management server; 
a part for reading out a password stored in the pre- 
paid information medium on the basis of information 
for authentication received from the prepaid infor- 
40 mation management server, performing a predeter- 
mined operation and sending a result of the opera- 
tion to the prepaid information management server; 
and 

a part tor writing information including a balance of 
45 the prepaid information medium to the prepaid in- 
formation medium on the basis of notification from 
the prepaid information management server; 

wherein the content server includes: 

so 

a part for making a request of the prepaid informa- 
tion management server for authentication to check 
whether the prepaid information medium is author- 
ized to be used for the chargeable service; 
55 a part for making a request of the prepaid informa- 
tion management server for billing for the prepaid 
information medium; and 

a part for providing the chargeable service to the 
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terminal if both authentication and billing succeed; 
and 

wherein the prepaid information management 
server includes: 

a part for authenticating the prepaid information me- 
dium at the terminal upon receipt of a request for 
authentication from the content server; 
a part for performing the billing on the basis of usage 
of the chargeable service; and 
a part for notifying the terminal of information includ- 
ing the balance of the prepaid information medium. 

[001 5] The above object of the present invention is al- 
so achieved by an article of manufacture including a 
computer usable medium having computer-readable 
code means embodied therein for causing, in an Internet 
billing system which makes billing on the Internet pos- 
sible, in which system al least one terminal, at least one 
content server and at least one prepaid information 
management server are connected to a network, a com- 
puter to control the terminal, the computer readable 
code means including: 

computer-readable program code means for ac- 
cessing the content server on the basis of address 
information stored in a prepaid information medium 
which has predetermined information necessary for 
transactions, and making a request for a service 
menu; 

computer-readable program code means for mak- 
ing a request of the content server for a chargeable 
service; 

computer-readable program code means for send- 
ing, upon receipt of a request from the prepaid in- 
formation management server, an ID stored in the 
prepaid information medium to the prepaid informa- 
tion management server; 

computer-readable program code means for receiv- 
ing information for authentication from the prepaid 
information management server, reading out a 
password stored in the prepaid information medi- 
um, performing a predetermined operation of con- 
catenation of the information and the password, and 
sending a result of the operation to the prepaid in- 
formation management server; and 
computer-readable program code means for writing 
information including a balance of the prepaid infor- 
mation medium to the prepaid information medium 
on the basis of notification from the prepaid infor- 
mation management server. 

[0016] The above object of the present invention is 
achieved by an article of manufacture including a com- 
puter usable medium having computer-readable code 
means embodied therein for causing, in an Internet bill- 
ing system which makes billing on the Internet possible, 
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in which system at least one terminal, at least one con- 
tent server and at least one prepaid information man- 
agement server are connected to a network, a computer 
to control the content server, the computer readable 
code means including: 

computer-readable program code means for receiv- 
ing a request for a service menu sent from the ter- 
minal on the basis of address information stored in 
a prepaid information medium which has predeter- 
mined information necessary for transactions; and 
sending the service menu to the terminal; 
computer-readable program code means for receiv- 
ing a request for a chargeable service from the ter- 
minal; 

computer-readable program code means for mak- 
ing a request of the prepaid information manage- 
ment server for authentication by sending a mes- 
sage which includes an address of the terminal to 
the prepaid information management server; 
computer-readable program code means for billing 
for the prepaid information medium by sending a 
point number necessary for the chargeable service; 
and 

computer-readable program code means for pro- 
viding the terminal with the chargeable service if 
both authentication and billing succeed. 

[0017] The above object of the present invention is al- 
so achieved by an article of manufacture including a 
computer usable medium having computer-readable 
code means embodied therein for causing, in an Internet 
billing system which makes billing on the Internet pos- 
sible, in which system at least one terminal, at least one 
content server and at least one prepaid information 
management server are connected to a network, a com- 
puter to control the prepaid information management 
server, the computer readable code means including: 

computer-readable program code means for receiv- 
ing a request for authentication of a prepaid infor- 
mation medium, used at the terminal, which prepaid 
information medium has predetermined information 
necessary for transactions, and for billing for the 
prepaid information medium; 
computer-readable program code means for mak- 
ing a request for an ID stored in the prepaid infor- 
mation medium, and receiving the ID; 
computer-readable program code means for send- 
ing information for authentication to the terminal; 
computer-readable program code means for receiv- 
ing a result of an operation performed by the termi- 
nal; 

computer-readable program code means for per- 
forming the same operation as performed in the ter- 
minal by referring to a database which stores pre- 
paid information, and authenticating the prepaid in- 
formation medium by verifying a result of the oper- 
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ation against the result sent from the terminal; 
computer-readable program code means for decre- 
menting a balance of the prepaid information medi- 
um by necessary points if the authentication suc- 
ceeds; and 

computer-readable program code means for notify- 
ing the terminal of information which includes the 
decremented balance of the prepaid information 
medium. 

[001 8] The above object of the present invention is al- 
so achieved by an IC card : in an Internet billing system 
which makes billing on the Internet possible, in which 
system at least one terminal, at least one content server 
and at least one prepaid information management serv- 
er are connected to a network, the IC card including: 

a part lor connecting to the terminal; 
predetermined information, which includes a pass- 
word, necessary for transactions; 
a part for retrieving information on authentication of 
the IC card from the prepaid information manage- 
ment server; and 

a part for performing a predetermined operation on 
the password and the retrieved information, 
wherein the terminal sends a result of the operation 
to the prepaid information management server, and 
the prepaid information management server au- 
thenticates the IC card by performing the same op- 
eration as performed in the IC card and by verifying 
a result of the same operation against the result of 
the operation performed in the IC card. 

[001 9] According to the present invention, the content 
server receives a chargeable service request from the 
terminal only when the authentication and billing are 
completed successfully, so that the content server can 
reject invalid orders with reliability. 
[0020] Also, according to the present invention, secret 
information of the prepaid information medium such as 
the password can be reliably prevented from being ob- 
tained by an invalid content server. 
[0021] Further, the prepaid information management 
server writes the balance and the date and time of use 
of service if the authentication and billing are completed 
successfully, so that a user of the prepaid information 
medium can know the balance and the history of use on 
the terminal without accessing the prepaid information 
management server. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0022] Other objects, features and advantages of the 
present invention will become more apparent from the 
following detailed description when read in conjunction 
with the accompanying drawings, in which: 

Fig. 1 is a sequence chart for explaining a general 



outline of an operation of an Internet billing system 
of the present invention; 

Fig.2 is a connection block diagram of an Internet 
billing system according to an embodiment of the 
present invention; 

Fig. 3 is an example of a table within a database of 
a card management server of an Internet billing sys- 
tem according to an embodiment of the present in- 
vention; 

Fig.4 is a block diagram of an Internet billing system 
according to an embodiment of the present inven- 
tion; 

Fig. 5 is a sequence chart for explaining a series of 
operations of an Internet billing system of the 
present invention; 

Fig.6 is a flowchart for explaining an operation of a 
terminal according to an embodiment of the present 
invention; 

Fig. 7 is a flowchart for explaining an operation of a 
content server according to an embodiment of the 
present invention; 

Fig. 8 is a flowchart for explaining an operation of a 
card management server according to an embodi- 
ment of the present invention; 
Fig. 9 is a block diagram of a computer system for 
explaining an embodiment of a computer usable 
medium according to the present invention; 
Fig. 10 is a block diagram of an IC card according 
to an embodiment of the present invention; 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0023] A prepaid information medium which is used 
when a user makes a request for a service to a content 
server will be called a "prepaid card" hereinafter, but the 
form of the prepaid information medium is not limited to 
a card. Also, a prepaid information management server 
will be called "a card management server" hereinafter, 
but the server can manage various information other 
than card information. 

[0024] The prepaid card is distributed and managed, 
for example, by a card management company. A user 
buys the prepaid card in order to utilize a service. In the 
prepaid card, information on a content server address, 
a card ID, a card password and so on, are stored. A re- 
maining amount or remaining points for using available 
service are managed by a prepaid information manage- 
ment server, that is to say, a card management server. 
[0025] A general outline of an operation of the Internet 
billing system of the present invention will now be de- 
scribed with reference to Fig.1 . 

[0026] In step 1 01 , a request for a chargeable service 
is sent from the terminal to the content server on the 
basis of address information (for example, URL on HT- 
TP) of the content server stored in the prepaid card (IC 
card, floppy disk, magnetic card, and so on). The con- 
tent server, in step 102, makes a request for authenti- 
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cation and billing to the card management server, then, 
in step 103, the card management server authenticates 
the prepaid card at the terminal, and in step 104. sends 
the result of the authentication and billing to the content 
server. If the authentication and the billing are success- 
fully completed, the content server, in step 105, provides 
the terminal with the chargeable service. 
[0027] Fig. 2 is a connection block diagram ol an In- 
ternet billing system according to an embodiment of the 
present invention. A terminal 100 sets a connection 11 
to a content server 200 via the Internet 400 and makes 
a request for a chargeable service by using the connec- 
tion 11. After receiving the chargeable service request 
from the terminal 1 00, the content server 200 sets a con- 
nection 1 2 to a card management server 300 and makes 
a request of the card management server 300 for au- 
thentication and billing of the prepaid card by sending 
information including an IP address of the terminal 100. 
[0028] After receiving the authentication and billing 
request from the content server 200, the card manage- 
ment server 300 sets a connection 1 3 to the terminal 
100 and makes a request of the terminal 100 for an op- 
eration on the password of the prepaid card. The termi- 
nal 100 sends the result of the operation to the card 
management server 300 by using the connection 13. 
The card management server 300 has a card manage- 
ment database 500 storing card IDs, passwords and 
balances of each card. An example of data within the 
database 500 is shown in Fig.3. The card management 
server 300 retrieves the password of the user ID from 
the database and performs the same operation on the 
password as performed in the terminal 100. If the result 
of the operation by the card management server 300 
matches the result of the operation by the terminal 100, 
the authentication is successful. After the authentication 
and billing by the card management server 300, the card 
management server 300 notifies the content server 200 
of the result of the authentication and billing. If the au- 
thentication and billing are successfully completed, the 
content server 200 starts providing the chargeable serv- 
ice to the terminal 100. If the authentication or billing is 
not successfully completed, the content server 200 no- 
tifies the terminal 100 by using the connection 11 that 
the prepaid card is not available for use. 
[0029] In the following, a configuration of an Internet 
billing system will be described. Fig.4 is a block diagram 
of an Internet billing system according to an embodi- 
ment of the present invention. As shown in Fig.4, the 
Internet billing system has a terminal 100, a content 
server 200 and a card management server 300. The ter- 
minal 1 00 accesses the content server 200 on the basis 
of content server address information stored in the pre- 
paid card and makes a request for a chargeable service. 
The content server 200 provides the service upon re- 
ceipt of the request from the terminal 100. The card 
management server 300 authenticates and bills the pre- 
paid card upon receipt of a request from the content 
server 200. 



[0030] The terminal 100 has a service request part 
101 and a card management part 102. The service re- 
quest part 101 automatically sets a connection to the 
content server 200 on the basis of the content server 

5 address information (such as URL) stored in the prepaid 
card and makes a request for a chargeable service. The 
service request part 1 01 may be embodied, tor example, 
by a WWW browser. The card management part 102 is 
connected to a prepaid card 103 via a reader suitable 

10 for the prepaid card 103 and sends a card ID stored in 
the prepaid card 103 upon receipt of a request from the 
card management server 300. Also, the card manage- 
ment part 102 reads out secret information (such as a 
password) from the prepaid card 103 upon receipt of a 

75 request from the card management server 300, and 
sends the information to the card management server 
300 after performing an operation of, for example, one- 
way function on the information. Further, the card man- 
agement part 102 writes a balance and a date and time 

20 of the use of the prepaid card 103 to the prepaid card 
103 upon receipt of a notification from the card manage- 
ment server 300. 

[0031] The content server 200 has an authentication 
request part 201 , a billing process request part 202, a 

2S service providing part 203, and a card management part 
204. The authentication request part 201, upon receipt 
of a chargeable service from the terminal 100, makes a 
request of the card management server 300 for authen- 
tication which confirms the validity of the prepaid card. 

30 The billing process request part 202 makes a request of 
the card management server 300 for billing of the pre- 
paid card. The service providing part 203, if both the au- 
thentication and the billing are successful, provides a 
chargeable service to the terminal 100. The card man- 

35 agement part 204 makes a request of the authentication 
request part 201 and the billing process request part 202 
for authentication and billing of the prepaid card. 
[0032] The card management server 300 has a au- 
thentication part 301 , a billing process part 302 and a 

40 card management database 303. The authentication 
part 301 , upon receipt of a request for authentication, 
authenticates the prepaid card at the terminal 100. The 
billing process part 302 bills the prepaid card on the ba- 
sis of the usage of the chargeable service, and notifies 

45 the terminal 100 of a balance and a date and time of use 
of the prepaid card 103. The card management data- 
base 303 stores information on prepaid cards such as 
card IDs, passwords, and balances. 
[0033] In the following, the operation of the above- 
so mentioned Internet billing system will be described. Fig. 
5 is a sequence chart for explaining a series of opera- 
tions of the Internet billing system of the present inven- 
tion. In the sequence chart, the Challenge Response 
method defined in the RFC1334 (W.Simpson, B PPP 

55 Challenge Handshake Authentication Protocol (CHAP) 
°, Aug 1 996) will be used as an example of a distribution 
and authentication method for chargeable video serv- 
ice. 
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[0034] In step 201 . the terminal 100, by using content 
server address information (such as URL) stored in the 
prepaid card 1 03 sets a connection to the content server 
200 which has the address and makes a request for a 
service menu. In step 202, the content server 200 sends 
a service menu such as a video program list to the ter- 
minal 100 after the setup of the connection. In step 203, 
if a user selects a service from the service menu, a serv- 
ice request message is sent to the content server 200. 
The needed number of points for the selected service 
may be included in the request message. The content 
server, in step 204, sets a connection to the card man- 
agement server 300, and sends, as a request for au- 
thentication which confirms the validity of the prepaid 
card, an authentication request message in which an IP 
address of the terminal 1 00 is included by using the con- 
nection to the card management server 300. At the 
same time, the content server 200 sends a billing re- 
quest message including the number of points of the 
service to the card management server 300. The au- 
thentication request message and the billing request 
message may be the same one message or separate 
messages. In step 205, the card management server 
300 sets a connection to the terminal 100 on the basis 
of the IP address of the terminal 100 in the received au- 
thentication request message and makes a request for 
a card ID of the prepaid card to the terminal 100 by using 
the connection. The terminal 100 sends, in step 206, the 
card ID stored in the prepaid card 103 to the card man- 
agement server 300. The card management server 300, 
in step 207, sends a random number (challenge) for au- 
thentication to the terminal 100 by using the connection. 
The random number varies from authentication to au- 
thentication. In step 208, the terminal 100 which re- 
ceives the random number performs an operation of 
one-way function, for example, MD5 n (Rivest R and S. 
Dusse, "The MD5 Message-Digest Algorithm," April 
1992) of concatenation of the random number and the 
password. Then, the terminal 100 sends a reply mes- 
sage (Response) including the result of the operation to 
the card management server 300. In step 209, the card 
management server 300 performs the same one-way 
function operation of concatenation of the password and 
the random number. In this time, the password is re- 
trieved from the card management database 500. The 
card management server 300 verifies the result of the 
operation against the reply from the terminal 100. If they 
match, the authentication succeeds, if not, the authen- 
tication fails. 

[0035] As mentioned above, the card management 
server 300 uses the random number which varies in 
each authentication of the prepaid card. Therefore, even 
if a third party intercepts a random number during the 
challenge session, the third party cannot fake the termi- 
nal 100 by using the random number another time. Fur- 
ther, because the result of the operation of the one-way 
function is used for the response session, the original 
password cannot be estimated even if a third party in- 



tercepts the response. 

[0036] In step 210, the card management server 300 
searches the database for the balance of the prepaid 
card 103 having the card ID. If the balance of the prepaid 

5 card 1 03 is larger than the number of points included in 
the billing request message, the card management 
server 300 decrements the balance by the number of 
points. If the balance of the prepaid card is smaller than 
the number of points included in the billing request mes- 

io sage, the billing cannot be completed and the process 
terminates. In step 211, the card management server 
300 notifies the terminal 100 of the balance of the pre- 
paid card 1 03 and the date and time of utilizing the serv- 
ice. The card management server 300, in step 212, no- 

15 tifies the content server 200 of the result of the authen- 
tication and billing. If the authentication or billing fails, 
the process terminates. In step 213, the content server 
200 provides a chargeable service to the terminal 100. 
[0037] Fig. 6 is a flowchart for explaining an operation 

20 of the terminal 100 according to an embodiment of the 
present invention. The operation of the terminal 100 will 
be described in the following. 

[0038] In step 301 , the terminal 100, by using an ad- 
dress information stored in the prepaid card 103, sets a 

2S connection to the content server 200 and makes a re- 
quest for a service menu. In step 302, the terminal 100 
sends to the content server 200 a service request mes- 
sage which includes the needed number of points. In 
step 303, the terminal 100 sends a card ID stored in the 

30 prepaid card to the card management server 300 upon 
receipt of a request from the card management server 
300. Upon a request from the card management server 
300, in step 304, the terminal 100 reads out secret in- 
formation (such as a password) stored in the prepaid 

35 card and after performing an operation of, for example, 
one-way function, on the secret information, sends the 
operated-on information to the card management server 
300. If the authentication and the billing succeed, in step 
305, the terminal 100 writes the balance and the date 

40 and time of use to the prepaid card 1 03 upon receipt of 
this information from the card management server 300. 
In step 306, the terminal 100 receives the chargeable 
service. If the authentication or the billing fails, the 
chargeable service will not be provided to the terminal 

45 100 (in step 307). 

[0039] The operation of the content server will be de- 
scribed in the following by using Fig. 7. Fig. 7 is a flow- 
chart ol the operation of the content server according to 
an embodiment of the present invention. In step 401, 

50 the content server 200 receives a request for a service 
menu from the terminal 100, and sends a menu list to 
the terminal 100. The content server, in step 402, re- 
ceives a chargeable service request from the terminal 
100. In step 403, the content server may set a card ID 

55 in a card ID part of an authentication and billing mes- 
sage, the terminal address in a terminal address part of 
the message and the needed points for the service in a 
service point part of the message. Then, the content 
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server 200 makes a request for authentication and bill- 
ing of the prepaid card 103 by sending the message to 
the card management server 300. In this embodiment, 
because the card management server 300 makes a re- 
quest for a card ID ol the prepaid card to the terminal 
100, the content server may not set a card ID. In other 
embodiments, the terminal 100 may send the card ID 
when the terminal 100 makes a request of the content 
server 200 for the chargeable service, or the terminal 
100 may send the card ID to the content server 200 on 
the basis of a request from the content server 200. In 
these cases, the content server sets the card ID. If both 
the authentication and billing succeed (in step 404), the 
content server 200 starts providing the chargeable serv- 
ice to the terminal 100 in step 405. If the authentication 
or billing fails (in step 404), the content server notifies 
the terminal 100 of the failure of the authentication or 
billing (in step 406). 

[0040] Fig. 8 is a flowchart of the operation of the card 
management server according to an embodiment of the 
present invention. The operation ol the card manage- 
ment server 300 will be described with reference to Fig. 
8 in the following. 

[0041] In step 501, the card management server re- 
ceives the authentication and billing request message 
of the prepaid card 103 from the content server 200. If 
the card ID is not set in the message, the card manage- 
ment server 300, in step 501-1 , sets a connection to the 
terminal 100 on the basis of the IP address of the termi- 
nal 1 00 in the received authentication and billing request 
message and makes a request for the card ID to the 
terminal 100 by using the connection. Then, the card 
management server 300 receives the card ID from the 
terminal 100 as a response of the request. If the card ID 
is set in the message in the step 501 , or after the step 
501 -1 , the card management server 300, in step 502, 
sets a connection to the terminal 1 00 on the basis of the 
IP address of the terminal 100 in the received authenti- 
cation and billing request message if there is no con- 
nection to the terminal 1 00, and sends a random number 
(challenge) for authentication by using the connection 
to the terminal 1 00. The random number varies from au- 
thentication to authentication. In step 503, the card man- 
agement server 300 receives a reply (Response) from 
the terminal 100 and performs the same one-way func- 
tion operation as performed in the terminal of concate- 
nation of the password and the random number. The 
password is retrieved from the card management data- 
base 500. The card management server 300 verifies the 
result of the operation against the reply from the terminal 
100. If they match, the authentication succeeds; if not, 
the authentication fails. 

[0042] If the authentication and billing succeed and 
the balance of the prepaid card 103 is larger than the 
needed number of service points, which number is in- 
cluded in the billing request message (in steps 504 and 
505), the card management server 300 decrements the 
balance by the number of service points in step 506. If 



the authentication fails (in step 504), the process termi- 
nates. If the balance of the prepaid card is smaller than 
the number of service point (in step 505), the billing be- 
comes impossible. In step 507, the card management 

s server 300 notifies the terminal 1 00 of the decremented 
balance of the prepaid card 103 and the date and time 
of using the service. In step 508, the card management 
server 300 notifies the content server of the result of the 
authentication and billing. 

w [0043] In the above-mentioned embodiment, other 
authentication methods can be used. 
[0044] Further, as chargeable services which can be 
provided to the terminal, there are, for example, a pro- 
gram download service, on-line shopping and so on. Ex- 

is amples of the form of the prepaid card are an IC card, 
a floppy disk, a magnetic disk, and so on. Also, in the 
above-mentioned embodiment, a user may input the 
password manually instead of using the password 
stored in the prepaid card. Further, the content server 

20 may make a request of the card management server for 
billing after the authentication of the prepaid card suc- 
ceeds. Furthermore, the prepaid card may store an 
amount of money, points, and various other prepaid in- 
formation. 

25 [0045] In the following, a computer usable medium of 
the present invention will be described. Fig. 9 is a block 
diagram of a computer system. The computer system 
comprises a CPU 400, a memory 401 , an external stor- 
age unit 402, a display 403, a keyboard 404, and a com- 
30 munication processing device 405. The computer usa- 
ble medium of the present invention corresponds to the 
memory 401 and/or the external storage device 402. 
The program carrying out above-mentioned processes 
is stored in the memory 401 and/or the external storage 
35 unit 402, and is run on the CPU 400, and then the proc- 
esses of the embodiment are carried out. Further, the 
computer usable medium of the present invention is em- 
bodied by an electronic memory, a hard disk, or by a 
transportable medium such as a floppy disk, a CD-ROM, 
40 a magnetic tape and so on. By loading the program for 
controlling the terminal stored in the medium into a com- 
puter system, by loading the program for controlling the 
content server into another computer system, and by 
loading the program for controlling the card manage- 
rs ment server into yet an other computer system, these 
computer systems can be used as the Internet billing 
system of the present invention. In this case, the com- 
puter system used for the terminal has a prepaid card 
reader. The reader may be an I C card reader, a floppy 
so disk drive and so on, the selection of which depends on 
the form of the prepaid card. 

[0046] An example of an I C card of the present inven- 
tion is shown in Fig. 10. The IC card 600 is, for example, 
a plastic card in which an IC 601 is embedded. In the IC 
55 601 , data and a program for the above-mentioned op- 
eration are stored, and the operation on the password 
and the random number is performed within the IC 601 . 
Because the password of its original form will not flow 
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out of the IC card, a high-level security will be retained. 
[0047] As mentioned above, according to the present 
invention, the content server receives a chargeable 
service request from the terminal only when the authen- 
tication and billing are completed successfully. There- s 
fore, the content server can reject invalid orders with re- 
liability. 

[0048] Also, according to the present invention, the 
content server sends the address information of the ter- 
minal to the card management server, and then the card io 
management server can authenticate the prepaid card 
in the terminal by accessing the terminal directly. There- 
fore, secret information of the prepaid card such as the 
password can be reliably prevent from being obtained 
by an invalid content server. 15 
[0049] Further, the card management server writes 
the balance and the date and time of use ol service if 
the authentication and billing are completed successful- 
ly. Therefore, the user of the prepaid card can know the 
balance and the hislory of use on the terminal without 20 
accessing the card management server. 
[0050] As mentioned above, an application of the 
present invention is not limited to the prepaid card. The 
present invention applies to, for example, payment by 
using a point card such as a mileage card provided by 2s 
airlines. In the case ol a mileage card, accumulated 
points by using an airline are stored in a database of the 
card management server. Same as in the case of the 
prepaid card, a user can use a chargeable service pro- 
vided by the content server through the use of the points 30 
stored in the database of the card management server. 
Furthermore, the present invention is applicable to pay- 
ment systems using point cards adopted in various in- 
dustries other than airlines, such as, department stores, 
hotels, sales of various materials (CD, video, game soft- 35 
ware and so on), video/CD rental, supermarkets, sales 
of home electrical products, gas stations, etc. 
[0051] The present invention is not limited to the spe- 
cifically disclosed embodiments, and variations and 
modifications may be made without departing from the 40 
scope of the invention. 



Claims 

45 

1. An Internet billing method which makes billing on 
the Internet possible, characterized in that said 
method comprising the steps of; 

(a) making a request, by a terminal, of a content so 
server for a chargeable service by using a pre- 
paid information medium which has predeter- 
mined information necessary for transactions; 

(b) making a request, by said content server, of 

a prepaid information management server for 55 
authentication to check whether said prepaid 
information medium is authorized to be used for 
said chargeable service, and for billing for said 



prepaid information medium; 

(c) authenticating, by said prepaid information 
management server, said prepaid information 
medium; 

(d) performing, by said prepaid information 
management server, the billing for the prepaid 
information medium on the basis of usage of 
the chargeable service; and 

(e) providing said terminal, by said content 
server, with said chargeable service. 

2. The Internet billing method as claimed in claim 1, 
characterized in that a password included in said 
predetermined information is input to said terminal 
by a user instead of Irom said prepaid information 
medium. 

3. An Internet billing method which makes billing on 
the Internet possible, characterized in that said 
method comprising the steps of: 

(a) making a request, by a terminal, of a content 
server for a service menu by using a prepaid 
information medium which has predetermined 
information necessary for transactions; 

(b) sending the service menu to said terminal 
by said content server; 

(c) making a request, by said terminal, of said 
content server for a chargeable service upon 
selecting needed service by a user; 

(d) making a request, by said content server, of 
a prepaid information management server for 
authentication to check whether said prepaid 
information medium is authorized to be used for 
said chargeable service, and for billing for said 
prepaid information medium; 

(e) sending, by said terminal, to said prepaid 
information management server, an ID stored 
in said prepaid information medium upon re- 
ceipt of a request from said prepaid information 
management server; 

(f) sending information for authentication to 
said terminal by said prepaid information man- 
agement server; 

(g) performing a predetermined operation of 
concatenation of said information and a pass- 
word by said terminal; 

(h) sending a result of the operation lo said pre- 
paid information management server; 

(i) performing, by said prepaid information man- 
agement server, the same operation as per- 
formed by said step (g) in said terminal of con- 
catenation of said information and said pass- 
word of said prepaid information medium, 
which password is stored in a database, and 
authenticating said prepaid information medi- 
um by verifying a result of the operation against 
the result sent from said terminal; 
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(j) searching the database for a balance ot the 
prepaid card having said ID, and performing 
billing with reference to the balance, by the pre- 
paid information management server; 
(k) notifying said terminal of information includ- 
ing the balance of said prepaid information me- 
dium by said prepaid information management 
server if both authentication by said step (i) and 
billing by said step (j) succeed; and 
(I) providing, by said content server, said 
chargeable service to said terminal. 

The Internet billing method as claimed in claim 3, 
characterized in that said password is input to said 
terminal by a user instead of from said prepaid in- 
formation medium. 

A method, in an Internet billing system which makes 
billing on the Internet possible, in which system at 
least one terminal, at least one content server and 
at least one prepaid information management serv- 
er are connected to a network, for controlling said 
terminal, characterized in that said method com- 
prising the steps of: 

(a) accessing said content server on the basis 
of address information stored in a prepaid in- 
formation medium which has predetermined in- 
formation necessary for transactions, and mak- 
ing a request for a service menu; 

(b) making a request of said content server for 
a chargeable service; 

(c) sending, upon receipt of a request from said 
prepaid information management server, an ID 
stored in said prepaid information medium to 
said prepaid information management server; 

(d) receiving information for authentication 
from said prepaid information management 
server, reading out a password stored in said 
prepaid information medium, performing a pre- 
determined operation of concatenation of said 
information and the password, and sending a 
result of the operation to said prepaid informa- 
tion management server; and 

(e) writing information including a balance of 
said prepaid information medium to said pre- 
paid information medium on the basis of notifi- 
cation from said prepaid information manage- 
ment server. 

A method, in an Internet billing system which makes 
billing on the Internet possible, in which system at 
least one terminal, at least one content server and 
at least one prepaid information management serv- 
er are connected to a network, for controlling said 
content server, characterized in that said method 
comprising the steps of: 



(a) receiving a request for a service menu from 
said terminal on the basis of address informa- 
tion stored in a prepaid information medium 
which has predetermined information neces- 

5 sary for transactions, and sending the service 

menu to said terminal; 

(b) receiving a request for a chargeable service 
from said terminal; 

(c) making a request of said prepaid information 
10 management server for authentication of the 

prepaid information medium by sending a mes- 
sage which includes an address of said termi- 
nal to said prepaid information management 
server, and for billing for said prepaid informa- 
15 tion medium by sending a number of points 

necessary for the chargeable service; and 

(d) providing said chargeable service to said 
terminal if both the authentication and billing 
succeed. 

20 

7. A method, in an Internet billing system which makes 
billing on the Internet possible, in which system at 
least one terminal, at least one content server and 
at least one prepaid information management serv- 
es er are connected to a network, for controlling said 
prepaid information management server, charac- 
terized in that said method comprising the steps of: 

(a) receiving a request for authentication of a 
30 prepaid information medium, used at said ter- 

minal, which prepaid information medium has 
predetermined information necessary for trans- 
actions, and for billing for said prepaid informa- 
tion medium; 

35 (b) making a request for an ID stored in said 

prepaid information medium, and receiving the 
ID; 

(c) sending information for authentication to 
said terminal; 

40 (d) receiving a result of an operation performed 

by said terminal; 

(e) performing the same operation as per- 
formed in said terminal by referring to a data- 
base which stores prepaid information, and au- 

45 thenticating said prepaid information medium 

by verifying a result of the operation against the 
result sent from said terminal; 

(f) decrementing a balance of said prepaid in- 
formation medium by necessary points if the 

so authentication succeeds; and 

(g) notifying said terminal of information which 
includes the decremented balance of said pre- 
paid information medium. 

ss 8. An Internet billing system which makes billing on the 
Internet possible, characterized in that said Internet 
billing system comprising at least one terminal, at 
least one content server and at least one prepaid 
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information management server which are connect- 
ed to a network, 

wherein said terminal comprises: 

means for making a request of said content 5 
server for a chargeable service by using a pre- 
paid information medium; 

wherein said content server comprises: 

10 

first means for making a request of said prepaid 
information management server for authentica- 
tion to check whether said prepaid information 
medium is authorized to be used for said 
chargeable service; is 
second means for making a request of said pre- 
paid information management server for billing 
for said prepaid information medium; and 
third means for providing said chargeable serv- 
ice to sard terminal; and 20 

wherein said prepaid information manage- 
ment server comprises: 

first means for authenticating said prepaid in- 25 
formation medium; and 

second means for performing the billing for said 
prepaid information medium on the basis of us- 
age of said chargeable service. 

30 

9. An Internet billing system which makes billing on the 
Internet possible, characterized in that said Internet 
billing system comprising at least one terminal, at 
least one content server and at least one prepaid 
information management server which are connect- 35 
ed to a network, 

wherein said terminal comprises: 

first means for making a request of said content 
server for a chargeable service by using a pre- 40 
paid information medium which has predeter- 
mined information necessary for transactions; 
second means for sending an ID stored in said 
prepaid information medium upon receipt of a 
request from said prepaid information manage- 
ment server; 

third means for reading out a password stored 
in said prepaid information medium on the ba- 
sis of information for authentication received 
from said prepaid information management so 
server, performing a predetermined operation 
and sending a result of the operation to said 
prepaid information management server; and 
fourth means for writing information including a 
balance of said prepaid information medium to 55 
said prepaid information medium on the basis 
of notification from said prepaid information 
management server; 



wherein said content server comprises: 

first means for making a request of said prepaid 
information management server for authentica- 
tion to check whether said prepaid information 
medium is authorized to be used for said 
chargeable service; 

second means for making a request of said pre- 
paid information management server for billing 
for said prepaid information medium; and 
third means for providing said chargeable serv- 
ice to said terminal if both authentication and 
billing succeed; and 

wherein said prepaid information manage- 
ment server comprises: 

first means for authenticating said prepaid in- 
formation medium at said terminal upon receipt 
of a request for authentication from said con- 
tent server; 

second means for performing the billing on the 
basis of usage of said chargeable service; and 
third means for notifying said terminal of infor- 
mation including a balance of said prepaid in- 
formation medium. 

10. A computer-readable recording medium recorded 
with a program for causing, in an Internet billing sys- 
tem which makes billing on the Internet possible, in 
which system at least one terminal, at least one con- 
tent server and at least one prepaid information 
management server are connected to a network, a 
computer to control said terminal, said program 
characterized by: 

a first code for causing the computer to access 
said content server on the basis of address in- 
formation stored in a prepaid information medi- 
um which has predetermined information nec- 
essary for transactions, and make a request for 
a service menu; 

a second code for causing the computer to 
make a request of said content server for a 
chargeable service; 

a third code for causing the computer to send, 
upon receipt of a request from said prepaid in- 
formation management server, an ID stored in 
said prepaid information medium to said pre- 
paid information management server; 
a fourth code for causing the computer to re- 
ceive information for authentication from said 
prepaid information management server, read 
out a password stored in said prepaid informa- 
tion medium, perform a predetermined opera- 
tion of concatenation of said information and 
the password, and send a result of the opera- 
tion to said prepaid information management 



BNSDOCID: <EP 0921487A2J_> 



12 



23 



EP 0 921 487 A2 



24 



server; and 

a fifth code for causing the computer to write 
information including a balance ol said prepaid 
information medium to said prepaid information 
medium on the basis of notification from said 
prepaid information management server 

11. A computer-readable recording medium recorded 
with a program for causing, in an Internet billing sys- 
tem which makes billing on the Internet possible, in 
which system at least one terminal, at least one con- 
tent server and at least one prepaid information 
management server are connected to a network, a 
computer to control said content server, said pro- 
gram characterized by: 

a first code tor causing the computer to receive 
a request for a service menu sent from said ter- 
minal on the basis of address information 
stored in a prepaid information medium which 
has predetermined information necessary for 
transactions, and send the service menu to said 
terminal; 

a second code for causing the computer to re- 
ceive a request for a chargeable service from 
said terminal; 

a third code for causing the computer to make 
a request of said prepaid information manage- 
ment server for authentication of the prepaid in- 
formation medium by sending a message 
which includes an address of said terminal to 
said prepaid information management server; 
a fourth code lor causing the computer to bill 
for said prepaid information medium by sending 
a point number necessary for said chargeable 
service; and 

a fifth code for causing the computer to provide 
said terminal with said chargeable service if 
both authentication and billing succeed, 

12. A computer-readable recording medium recorded 
with a program for causing, in an Internet billing sys- 
tem which makes billing on the Internet possible, in 
wh ich system at least one terminal, at least one con- 
tent server and at least one prepaid information 
management server are connected to a network, a 
computer to control said prepaid information man- 
agement server, said program characterized by: 



information medium, and receive the ID; 
a third code for causing the computer to send 
information for authentication to said terminal; 
a fourth code for causing the computer to re- 
s ceive a result of an operation performed by said 

terminal; 

a fifth code for causing the computer to perform 
the same operation as pertormed in said termi- 
nal by referring to a database which stores pre- 
io paid information, and authenticate said prepaid 

information medium by verifying a result of the 
operation against the result sent from said ter- 
minal; 

a sixth code for causing the computer to decre- 
es ment a balance of said prepaid information me- 
dium by necessary points if the authentication 
by said fifth code succeeds; and 
a seventh code for causing the computer to no- 
tify said terminal of information which includes 
20 the decremented balance of said prepaid infor- 
mation medium. 

13. An IC card, in a Internet billing system which makes 
billing on the Internet possible, in which system at 
2S least one terminal, at least one content server and 

at least one prepaid information management serv- 
er are connected to a network, said IC card charac- 
terized by: 

30 first means for connecting to said terminal; 

predetermined information, which includes a 
password, necessary for transactions; 
second means for retrieving information on au- 
thentication of said I C card from said prepaid 

35 information management server; and 

third means for performing a predetermined op- 
eration on the password and the retrieved in- 
formation, 

wherein said terminal sends a result of the op- 
40 eration to said prepaid information manage- 

ment server, and said prepaid information man- 
agement server authenticates said IC card by 
performing the same operation as performed in 
said IC card and by verifying a result of the 
45 same operation against the result of the oper- 

ation performed in said IC card. 



a first code for causing the computer to receive 
a request for authentication of a prepaid infor- 
mation medium, used at said terminal, which 
prepaid information medium has predeter- 
mined information necessary for transactions, 
and for billing for said prepaid information me- 
dium; 

a second code for causing the computer to 
make a request for an ID stored in said prepaid 
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